Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C4A1E950F1E011EF9DE2CFAB762E951A.roa
File: C4A1E950F1E011EF9DE2CFAB762E951A.roa (raw, json)
Hash identifier: lkid3ef7K+2vbgp16fGqrQQiA3orOIzyvLMroLZTNN4=
Subject key identifier: D4:B7:91:E3:6E:13:90:E1:C9:C8:CC:C7:D4:56:3C:FF:50:0E:52:EF
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 015B6F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C4A1E950F1E011EF9DE2CFAB762E951A.roa
Signing time: Sun 23 Feb 2025 12:21:54 +0000
ROA not before: Sun 23 Feb 2025 12:21:51 +0000
ROA not after: Sat 29 Mar 2025 12:21:51 +0000
asID: 203020
IP address blocks: 154.223.140.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 88943 (0x15b6f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 23 12:21:51 2025 GMT
Not After : Mar 29 12:21:51 2025 GMT
Subject: CN=67bb12e2-a05d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:3a:46:c9:6f:95:be:cc:7a:a7:23:20:42:b6:
08:40:ed:d5:b2:56:74:bb:86:c8:ec:78:cd:93:04:
9b:7b:2e:32:d0:ae:be:fa:a0:3e:38:fb:73:fa:84:
4f:e8:d9:76:19:f2:e5:f2:d3:5f:6d:a4:0a:c6:d9:
8c:3e:32:f8:f8:2e:74:96:1a:2f:b4:be:b8:eb:45:
4e:64:d7:20:81:cd:bb:64:9b:4a:9d:6e:e8:e7:0f:
ee:38:90:03:57:53:72:43:85:54:50:ed:36:88:fb:
23:2d:ac:48:97:a6:d2:c4:30:99:b0:48:65:fc:6d:
99:cd:b6:91:c6:d4:1e:31:73:20:26:f5:61:5a:f6:
21:16:5d:e6:f8:35:ec:52:97:91:a9:cd:64:e0:2f:
83:41:82:2b:11:7d:01:57:97:9a:5e:d7:9d:5b:5b:
fd:0b:bf:00:01:b1:4e:01:7d:03:32:57:a8:e5:1a:
4d:7c:bb:ba:8e:ab:57:42:65:38:a9:01:e3:eb:41:
06:5a:bc:11:d3:e5:c3:fe:7e:77:7d:63:15:d4:16:
be:0b:f4:66:66:0b:1c:37:f0:3b:8c:ea:26:48:6b:
20:54:2c:3c:dc:b2:90:33:b0:ac:69:98:57:e3:ee:
8b:c0:7b:66:3f:ea:ba:49:66:16:5c:f9:ee:8d:e6:
fe:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:B7:91:E3:6E:13:90:E1:C9:C8:CC:C7:D4:56:3C:FF:50:0E:52:EF
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C4A1E950F1E011EF9DE2CFAB762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.140.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:1a:d9:a9:78:d0:bf:87:78:b3:65:75:54:4a:40:93:62:19:
14:d9:9e:e3:72:3a:e5:71:15:27:26:84:a8:18:56:38:82:2c:
79:d7:64:5f:a6:14:ce:4d:59:bc:1b:ce:13:d7:5f:07:65:ab:
49:91:d1:d7:b2:36:51:44:24:61:7f:b3:d2:21:31:2f:3f:1e:
b5:0a:1c:66:27:24:44:a8:28:bc:f7:f3:81:a3:78:ee:96:b9:
cf:3d:cb:de:04:36:20:f6:f2:41:c8:34:37:39:ab:83:90:31:
20:04:91:67:14:99:60:39:b3:72:bf:bb:e6:8d:26:da:dd:7e:
10:44:76:df:66:c0:83:83:34:73:d0:b6:b7:a1:fa:cf:b8:be:
ef:37:47:f3:09:c6:54:b4:da:50:83:82:f2:c8:51:52:0f:90:
e4:c3:d1:2e:21:7d:23:19:16:18:aa:da:85:6a:af:0e:a2:74:
91:cb:8d:af:19:64:9f:6f:59:a6:56:28:32:fa:57:11:56:ff:
aa:8c:b2:43:4b:e0:fb:a2:87:9e:6a:26:0d:e1:9c:6b:8d:83:
be:75:87:c8:0e:09:87:88:cd:d0:0b:28:c7:20:60:40:ca:f2:
2c:38:b5:dd:34:73:e0:f7:8d:a5:c8:cc:4a:28:79:1b:70:74:
0c:c7:77:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 05:03:47 2025 by rpki-client